
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.mft
File: hFxYdS8zNkIv8O4XJkdFkeekHl8.mft (raw, json)
Hash identifier: i+gK8ggdgKLDZ63Pe/v8Y87YxC3eJI0aWmvgoO8htrQ=
Subject key identifier: A7:7D:47:FA:DB:D1:F7:7A:8B:6F:8D:26:94:B9:C0:6B:9E:E3:06:98
Authority key identifier: 84:5C:58:75:2F:33:36:42:2F:F0:EE:17:26:47:45:91:E7:A4:1E:5F
Certificate issuer: /CN=845c58752f3336422ff0ee1726474591e7a41e5f
Certificate serial: 01A0E02B00F2077C9E1F77E9F32B29DAD0F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.mft
Manifest number: 1A79
Signing time: Sun 27 Sep 2026 00:01:49 +0000
Manifest this update: Sun 27 Sep 2026 00:01:49 +0000
Manifest next update: Mon 28 Sep 2026 00:01:49 +0000
Files and hashes: 1: 1-5ZO4wy2gdMm-RlasEiiUu_66ag.roa (hash: z6hiEkQzG0sD38AUOglWiXkVXLhBbifg/B/a3MzT8UE=)
2: 4sjyq3qhVZlOGoiUzGF4lAOm0Ms.roa (hash: snRHhhCF/A70W64B8Ansk4wih7fxueYm9qlqzv1rXXE=)
3: JXD9OGEgFf3Wk4sh84udKIfqooU.roa (hash: qrmAAi4FfndLs6wG6DvmHeD7s+/mauxwlNM+tOn8N8I=)
4: Ncp12bGOlnl7zeDP17e5hwwIiXs.roa (hash: 8U+DuszR+o7r4oyJP5qAPzyleDSPshxobLvejlTQgog=)
5: OMs3SExnh8q-OfFFrIMvJ4V20rM.roa (hash: 3VJ0PQELJEdphYzfdK0KvVfZHKT8gZroOq8apM3LPBE=)
6: bcdCYadegTnuv1kyS3SFpw7_obg.roa (hash: FHoWoxIPPut7YlIBnS9RiEjsnw6/GTtGF64PoDTZc+8=)
7: hFxYdS8zNkIv8O4XJkdFkeekHl8.crl (hash: kyObOf11Gxzez9pAxSZ/HVrLRdg3Lxmh+bKMSUXulEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:2b:00:f2:07:7c:9e:1f:77:e9:f3:2b:29:da:d0:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845c58752f3336422ff0ee1726474591e7a41e5f
Validity
Not Before: Sep 27 00:01:49 2026 GMT
Not After : Sep 28 00:01:49 2026 GMT
Subject: CN=a77d47fadbd1f77a8b6f8d2694b9c06b9ee30698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:10:f5:bd:17:52:8e:a7:be:36:d3:d1:86:27:
85:ac:fa:f9:f5:27:96:12:55:74:38:33:f9:77:f0:
57:a7:ad:f3:fe:c4:dd:8a:4a:03:7f:c4:ee:28:a9:
6d:17:8c:03:d9:c7:a7:fd:0e:e5:90:a5:64:48:ca:
8a:2b:ce:19:6b:04:9d:ff:12:d5:1a:07:1a:83:ab:
67:92:8e:eb:66:aa:14:17:4d:e8:f1:09:bb:bb:fa:
4f:d5:59:99:2a:98:cc:72:71:48:87:d7:b4:92:5a:
b8:d8:bd:a0:2a:37:69:87:0a:4b:b4:b6:77:6d:62:
a4:63:17:1e:4f:fb:11:41:67:6f:78:8e:62:39:27:
cc:95:83:09:5e:67:06:92:a0:cb:f0:32:e0:3e:8b:
9b:d6:2e:ce:ea:a5:60:cd:c1:50:37:09:38:c2:70:
97:26:a1:95:8f:22:1a:9f:c0:c7:c8:6b:68:5b:0c:
3d:db:fc:47:c8:e1:28:65:0b:d1:61:30:e7:26:8e:
3a:6e:25:19:77:c0:1e:cd:84:86:05:65:57:18:1d:
69:b7:24:01:c4:dc:6c:17:44:11:7e:38:ab:2c:c6:
f7:38:ee:88:51:5f:88:da:bc:c3:b1:51:f7:b3:27:
e2:d0:2d:84:6a:4a:c3:ca:e2:25:2b:29:22:b2:22:
4c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:7D:47:FA:DB:D1:F7:7A:8B:6F:8D:26:94:B9:C0:6B:9E:E3:06:98
X509v3 Authority Key Identifier:
keyid:84:5C:58:75:2F:33:36:42:2F:F0:EE:17:26:47:45:91:E7:A4:1E:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:ec:62:8d:c7:fb:26:ba:17:4f:07:c2:3a:87:f5:3d:35:c0:
f3:02:9a:96:f3:3a:4e:c0:d1:42:40:23:a4:94:7e:ae:29:1c:
b4:aa:72:1f:8e:00:73:15:d5:7c:b5:da:87:ab:3b:3e:2c:08:
cf:e4:4e:fd:63:9b:5a:9d:f1:30:76:6e:cb:68:40:a2:55:08:
49:fa:57:86:78:7e:23:4d:f9:29:ee:93:17:da:3e:f9:ba:ed:
48:f5:86:f6:f9:bd:f2:08:3f:b4:6f:34:19:3f:59:20:db:80:
14:e6:67:0f:c5:1f:d5:56:7c:77:96:52:43:38:21:b0:dc:58:
1a:ef:d3:e0:a0:bd:29:6a:72:47:e1:d7:af:ae:99:6c:fe:4b:
36:7c:e1:7e:c6:e6:f0:c8:89:15:5e:2a:7a:35:42:a1:be:2d:
8d:9d:ef:5f:9f:b7:b7:3d:c4:c1:28:26:10:7a:df:49:6f:e3:
ca:62:e6:05:49:8e:3b:7f:f3:1f:ee:16:92:6b:cf:ad:4f:7b:
c6:e0:6f:94:be:bb:f9:e1:d1:d4:ea:d9:7d:cc:3b:e4:8d:c3:
35:0f:4f:24:17:21:aa:78:11:82:d3:b4:9f:75:e1:b5:9b:d0:
83:c5:37:3f:c2:ee:e9:1b:b8:4a:8d:f6:0f:41:cc:e2:ce:64:
39:59:91:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:27:58 2026 by rpki-client